Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/BH5DbfSDWQGO-8taZWbUNENJbho.roa
File:                     BH5DbfSDWQGO-8taZWbUNENJbho.roa (raw, json)
Hash identifier:          bY2M6/rlSSLKO4kgxGTXjc266RJP1sERV8K65Hrh7LQ=
Subject key identifier:   04:7E:43:6D:F4:83:59:01:8E:FB:CB:5A:65:66:D4:34:43:49:6E:1A
Certificate issuer:       /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial:       25226A1A
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/BH5DbfSDWQGO-8taZWbUNENJbho.roa
Signing time:             Sat 01 Jan 2022 10:01:53 +0000
ROA not before:           Sat 01 Jan 2022 10:01:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47583
IP address blocks:        45.93.136.0/22 maxlen: 22
                          45.87.80.0/22 maxlen: 22
                          194.11.214.0/23 maxlen: 23
                          212.1.212.0/24 maxlen: 24
                          212.1.212.0/22 maxlen: 22
                          212.1.211.0/24 maxlen: 24
                          212.1.210.0/24 maxlen: 24
                          212.1.208.0/24 maxlen: 24
                          212.1.208.0/21 maxlen: 21
                          212.1.215.0/24 maxlen: 24
                          195.110.58.0/23 maxlen: 23
                          31.170.165.0/24 maxlen: 24
                          31.170.160.0/22 maxlen: 22
                          31.170.164.0/23 maxlen: 23
                          31.170.164.0/24 maxlen: 24
                          31.170.166.0/23 maxlen: 23
                          153.92.4.0/23 maxlen: 23
                          153.92.3.0/24 maxlen: 24
                          153.92.2.0/24 maxlen: 24
                          153.92.1.0/24 maxlen: 24
                          153.92.7.0/24 maxlen: 24
                          153.92.6.0/23 maxlen: 23
                          153.92.6.0/24 maxlen: 24
                          153.92.11.0/24 maxlen: 24
                          153.92.10.0/24 maxlen: 24
                          153.92.9.0/24 maxlen: 24
                          153.92.8.0/21 maxlen: 21
                          153.92.8.0/24 maxlen: 24
                          31.220.17.0/24 maxlen: 24
                          31.220.16.0/24 maxlen: 24
                          153.92.15.0/24 maxlen: 24
                          153.92.14.0/24 maxlen: 24
                          153.92.13.0/24 maxlen: 24
                          153.92.12.0/24 maxlen: 24
                          31.220.20.0/23 maxlen: 23
                          31.220.23.0/24 maxlen: 24
                          185.28.23.0/24 maxlen: 24
                          31.220.22.0/24 maxlen: 24
                          185.28.22.0/24 maxlen: 24
                          31.220.21.0/24 maxlen: 24
                          31.220.19.0/24 maxlen: 24
                          31.220.18.0/24 maxlen: 24
                          185.28.21.0/24 maxlen: 24
                          31.220.20.0/24 maxlen: 24
                          185.28.20.0/24 maxlen: 24
                          31.220.48.0/20 maxlen: 20
                          31.220.108.0/24 maxlen: 24
                          31.220.107.0/24 maxlen: 24
                          31.220.106.0/24 maxlen: 24
                          31.220.111.0/24 maxlen: 24
                          31.220.110.0/24 maxlen: 24
                          31.220.109.0/24 maxlen: 24
                          194.11.154.0/23 maxlen: 23
                          31.220.105.0/24 maxlen: 24
                          31.220.104.0/24 maxlen: 24
                          93.188.160.0/21 maxlen: 21
                          45.13.132.0/23 maxlen: 23
                          45.13.134.0/23 maxlen: 23
                          2.57.90.0/24 maxlen: 24
                          2.57.88.0/23 maxlen: 23
                          2.57.91.0/24 maxlen: 24
                          156.67.208.0/20 maxlen: 20
                          45.13.252.0/23 maxlen: 23
                          45.13.254.0/23 maxlen: 23
                          2a02:4780::/48 maxlen: 48
                          2a02:4780:11::/48 maxlen: 48
                          2a02:4780:a::/48 maxlen: 48
                          2a02:4780:e::/48 maxlen: 48
                          2a02:4780:b::/48 maxlen: 48
                          2a02:4780:1::/48 maxlen: 48
                          2a02:4780:4::/48 maxlen: 48
                          2a02:4780:8::/48 maxlen: 48
                          2a02:4780:f::/48 maxlen: 48
                          2a02:4780:5::/48 maxlen: 48
                          2a02:4780:9::/48 maxlen: 48
                          2a02:4780:c::/48 maxlen: 48
                          2a02:4780:2::/48 maxlen: 48
                          2a02:4780:10::/48 maxlen: 48
                          2a02:4780:6::/48 maxlen: 48
                          2a02:4780:3::/48 maxlen: 48
                          2a02:4780:d::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623012378 (0x25226a1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
        Validity
            Not Before: Jan  1 10:01:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=047e436df48359018efbcb5a6566d43443496e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:75:71:ae:2d:92:72:fd:a2:f5:d7:08:b0:3b:
                    c3:c9:a9:1e:77:e4:86:0e:90:75:c5:bb:3b:d5:3e:
                    51:72:41:ac:8f:70:3b:35:3a:60:56:92:d4:08:eb:
                    6f:1b:79:15:79:bc:6d:97:ed:91:49:2c:78:ca:1f:
                    fd:6f:e6:0f:4c:f8:75:50:d1:a4:15:0b:44:2e:d1:
                    7e:b4:30:5f:43:61:f0:10:52:94:27:38:4f:2c:8f:
                    c9:41:d1:c9:d1:6e:16:a4:78:e6:13:89:c6:83:fc:
                    ac:4b:04:c0:2f:d9:90:f6:79:4a:b5:6b:0c:b3:0b:
                    8e:40:16:12:70:4a:46:26:2e:9c:07:8a:7a:65:cb:
                    fc:93:5e:47:24:7a:84:3a:1f:f4:d8:3e:81:d1:9b:
                    f6:a1:5c:a6:62:19:ed:64:0a:c1:15:66:b3:51:e0:
                    a8:38:45:b4:d3:1f:41:6a:c4:ed:c5:06:f3:56:a6:
                    17:53:4f:86:38:af:16:82:ab:99:69:e9:95:02:ba:
                    4f:2b:4b:44:6e:e1:bc:f3:03:7c:03:1f:e8:c8:ec:
                    f2:8a:72:88:68:dc:b3:44:c5:64:a5:f6:f5:16:32:
                    7c:a5:f3:9e:a0:38:16:a9:5f:16:a9:09:cb:67:8d:
                    f7:be:48:d5:fe:af:59:75:fa:8e:1c:ba:fc:78:b2:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7E:43:6D:F4:83:59:01:8E:FB:CB:5A:65:66:D4:34:43:49:6E:1A
            X509v3 Authority Key Identifier:
                keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/BH5DbfSDWQGO-8taZWbUNENJbho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.88.0/22
                  31.170.160.0/21
                  31.220.16.0/21
                  31.220.48.0/20
                  31.220.104.0/21
                  45.13.132.0/22
                  45.13.252.0/22
                  45.87.80.0/22
                  45.93.136.0/22
                  93.188.160.0/21
                  153.92.1.0-153.92.15.255
                  156.67.208.0/20
                  185.28.20.0/22
                  194.11.154.0/23
                  194.11.214.0/23
                  195.110.58.0/23
                  212.1.208.0/21
                IPv6:
                  2a02:4780::-2a02:4780:6:ffff:ffff:ffff:ffff:ffff
                  2a02:4780:8::-2a02:4780:11:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         65:c8:e6:4d:cb:00:81:6b:61:22:47:40:21:0f:6d:48:43:26:
         87:91:1a:be:0b:af:ac:f6:1e:12:a7:12:d1:62:be:4d:c9:ef:
         4b:81:00:d9:63:e8:66:0e:19:77:c5:8a:7d:51:f0:3a:76:91:
         4b:40:61:1d:a3:22:42:12:c8:40:b3:2e:b8:e6:99:8b:69:a0:
         c5:2e:08:82:d6:d6:96:d7:94:c7:a4:0a:a0:3a:18:02:28:58:
         75:40:d1:38:8d:09:9d:c4:4d:24:10:7a:3a:a5:6d:1d:e7:e8:
         e2:29:20:25:2c:44:4d:18:3c:3f:bb:68:76:22:0d:8d:44:62:
         84:ea:3d:29:1d:36:b0:85:02:be:b7:c4:6b:ac:b0:fc:10:6f:
         c3:33:28:bf:d3:5f:a6:6e:93:cf:c9:32:9f:fc:42:29:7d:11:
         98:52:07:62:99:d4:e0:90:d2:d5:15:88:9b:b3:2a:cc:83:c7:
         d6:11:a0:4d:ff:9c:ac:a2:bc:32:f6:48:1b:25:dd:9c:82:83:
         28:3f:ef:2f:06:b0:83:bf:10:74:51:35:b4:42:33:76:f0:c8:
         bf:36:73:2f:7f:33:0e:11:4e:bb:29:eb:ad:96:27:41:6b:8e:
         64:f0:23:9b:27:dd:0a:18:5a:ae:b1:5f:09:2d:13:3a:7c:0c:
         a0:1f:41:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:23 2024 by rpki-client on console-ams.rpki-client.org